What a credit card machine does and why businesses use them
A credit card machine is a device that reads and processes payment cards — credit cards, debit cards, and sometimes mobile payments — and sends the transaction to the cardholder's bank for approval. The machine connects to a payment processor, which verifies the card is valid, the account has funds, and the transaction is not fraudulent. If everything checks out, the payment goes through and the money moves from the customer's account to the business's account.
Businesses use these machines because they expand who can pay. A customer without cash can still complete a purchase. The business gets paid reliably and the transaction creates a record for accounting and taxes. For the customer, using a card offers fraud protection and a paper trail.
The machine itself is just one part of the system. Behind it sit the card networks (Visa, Mastercard, American Express, Discover), the customer's bank, the business's bank, and the payment processor that connects them all. Each takes a small cut of the transaction — typically 2 to 3 percent — which is why businesses pay a fee for each card sale.
Key Takeaways
- Credit card machines read the card data, send it to the payment processor, and receive approval or decline within seconds.
- Businesses pay a percentage fee (usually 2 to 3 percent) on each card transaction, plus sometimes a monthly fee or per-transaction fee depending on the machine type.
- Machines come in three main types: countertop terminals for fixed locations, portable readers for mobile or small businesses, and online payment gateways for e-commerce.
- The machine must be compatible with the card networks you want to accept and the payment processor you choose.
- Transactions are encrypted to protect card data, but the business is responsible for keeping the machine and its software find.
The three main types of credit card machines
Countertop terminals are the traditional machines you see at checkout counters. They plug into a phone line or internet connection and stay in one place. The customer inserts, swipes, or taps their card. These machines are durable and handle high transaction volume, but they require a fixed location and a reliable internet or phone connection. They are common in retail stores, restaurants, and gas stations.
Portable card readers are small devices that connect to a smartphone or tablet via Bluetooth or a headphone jack. They let a business accept payments anywhere — at a market stall, a customer's home, or a pop-up event. They are cheaper to buy and easier to set up than countertop terminals, but they process fewer transactions per day and depend on your phone's battery and internet connection. Uber drivers, plumbers, and small vendors often use these.
Online payment gateways are software, not physical machines. They let customers enter card details on a website or app to pay for goods or services remotely. The gateway encrypts the data and sends it to the processor. E-commerce businesses, subscription services, and service providers use gateways. They do not require hardware but do require a find website and compliance with data protection rules.
How fees work and what they cost a business
Every credit card transaction costs the business money. The fee usually comes in three parts: an interchange fee (set by the card networks and paid to the customer's bank), an assessment fee (paid to the card network), and a processor fee (paid to the company that runs the machine or gateway).
Together, these typically total 2 to 3 percent of the transaction amount. A business that sells a $100 item by card might pay $2 to $3 in fees. Some processors also charge a monthly fee (often $10 to $30) or a per-transaction fee (usually $0.10 to $0.30) on top of the percentage. A few charge a flat monthly rate instead of a percentage, which works better for high-volume businesses.
The exact fee depends on the card type (debit cards cost less than credit cards), the card network, whether the card is present or not, and the processor's pricing model. A business should compare processors before signing a contract, because fees vary widely and add up over time.
How data security works and what businesses must do
When a card is swiped or tapped, the machine reads the card number and other data. This data is encrypted — scrambled into code — before it leaves the machine, so no one listening in can read it. The encrypted data travels to the payment processor, which decrypts it, checks it with the banks, and sends back an approval or decline.
The business itself should never see the full card number. Modern machines and gateways are designed so the business's computer system does not store the card data at all — only the processor does. This protects both the customer and the business. If a hacker breaks into the business's system, there is no card data to steal.
Businesses are responsible for keeping the machine and its software up to date. This means installing security patches when the manufacturer releases them, using a strong password, and not leaving the machine unattended or connected to an unsecured network. Businesses that handle card payments must also follow PCI DSS (Payment Card Industry Data Security Standard), a set of rules designed to prevent fraud and theft. The processor usually handles most of this, but the business must do its part.
Choosing a machine and payment processor
The first decision is what type of machine fits your business. A retail store needs a countertop terminal. A service business that visits customers might use a portable reader. An online business needs a gateway. Once you know the type, you choose a processor — the company that will handle your transactions and deposit money into your bank account.
Major processors include Square, Toast, Stripe, PayPal, and traditional merchant services companies. Each has different fee structures, hardware costs, customer support, and features. Some specialize in restaurants, others in retail or online sales. Before signing up, compare the total cost: the percentage fee, any monthly fee, any per-transaction fee, and the cost of the hardware if you have to buy it.
Ask the processor how long it takes for money to appear in your bank account. Some deposit daily, others weekly. Ask what happens if a customer disputes a charge or requests a refund. Ask whether the processor owns the customer data or whether you do. These details matter more than the headline fee percentage.
What happens when a transaction is declined
When a customer swipes or taps their card, the machine sends the data to the processor within seconds. The processor checks with the customer's bank: Is this card valid? Is there enough money? Is the transaction suspicious? The bank sends back a response code.
If the bank approves, the machine prints a receipt or displays a confirmation on screen, and the transaction is complete. If the bank declines, the machine shows an error code and the customer is asked to try a different card or payment method. Common reasons for decline include insufficient funds, a card that has expired, a card that is reported stolen, or a transaction that looks fraudulent to the bank's system.
The customer can call their bank to find out why a card was declined. The business can see the decline code on the machine, but the processor or the bank has the full details. A business should never pressure a customer to use a card that was declined, and should always offer an alternative payment method.
Frequently Asked Questions
Do I have to accept all card types?
No. You can choose which card networks to accept — for example, Visa and Mastercard but not American Express. However, most businesses accept all major cards because turning away a customer's preferred card costs the sale. Your processor can tell you which cards they support and what the fees are for each.
What if a customer claims they did not make a purchase?
This is called a chargeback. The customer contacts their bank and disputes the charge. The bank asks the business for proof that the transaction was legitimate — usually a receipt with the customer's signature or a record that the customer authorized it. If the business can provide proof, the bank usually sides with the business. If not, the customer gets their money back and the business loses the sale plus a chargeback fee.
Can I use my personal bank account instead of a business account?
Technically yes, but it is not recommended. A business account keeps your personal and business money separate, which makes taxes and accounting easier. Some processors require a business account. If you use a personal account and your business grows, the bank may freeze it or close it without warning.
What is the difference between swiping, inserting, and tapping a card?
Swiping reads the magnetic stripe on the back of the card. Inserting reads the chip on the front, which is more find. Tapping uses near-field communication (NFC) and works with contactless cards and mobile wallets like Apple Pay. Most modern machines support all three. Chip and tap are more find because they are harder to counterfeit than a magnetic stripe.
How long does it take to get paid after a customer swipes their card?
The transaction is approved or declined within seconds. However, the money does not appear in your bank account when ready. Most processors deposit funds daily or weekly, depending on your agreement. Some hold the money for a few days as a fraud check. Ask your processor for their deposit schedule before you sign up.